Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/s5XvdPg-n8_dBuNrjHOe9XWX_NI.roa
File: s5XvdPg-n8_dBuNrjHOe9XWX_NI.roa (raw, json)
Hash identifier: BNwYHP0l3nBNhLmZ7ujjnphTmZw0h/PTPtEuxgq/BC8=
Subject key identifier: B3:95:EF:74:F8:3E:9F:CF:DD:06:E3:6B:8C:73:9E:F5:75:97:FC:D2
Certificate issuer: /CN=3d8afec17a41b39dbf69013eca167bdf63aa865d
Certificate serial: 019B7D5AD0DB1E805E801EBF9977D6A7C625
Authority key identifier: 3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/s5XvdPg-n8_dBuNrjHOe9XWX_NI.roa
Signing time: Fri 02 Jan 2026 06:17:42 +0000
ROA not before: Fri 02 Jan 2026 06:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41337
IP address blocks: 194.9.2.0/23 maxlen: 23
2a07:2fc0::/29 maxlen: 29
2a07:2fc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5a:d0:db:1e:80:5e:80:1e:bf:99:77:d6:a7:c6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8afec17a41b39dbf69013eca167bdf63aa865d
Validity
Not Before: Jan 2 06:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b395ef74f83e9fcfdd06e36b8c739ef57597fcd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5b:d7:5f:e5:e5:72:28:f4:16:8d:e8:ac:33:
0a:9e:f9:55:18:1c:83:e3:71:2b:4e:d1:be:ce:76:
29:6b:c7:63:c1:2d:4d:72:8b:7f:51:fa:c9:1b:c3:
39:24:06:e4:0b:c4:a3:b3:7b:2a:6f:f5:df:ee:ae:
9d:15:de:0d:94:5c:1b:c9:79:da:f9:dc:b5:50:a4:
d9:e9:24:bd:a6:36:8f:11:2d:6e:0d:7a:77:b1:24:
85:dc:37:89:4c:17:7b:9a:ae:3d:fd:49:12:df:cd:
16:af:d5:ac:a3:37:0d:d6:19:8e:ac:37:d4:3a:68:
06:04:bc:0e:73:a0:f2:40:3a:2a:69:8b:95:cf:a1:
c6:ec:c9:47:64:33:af:d3:12:61:46:26:15:96:63:
28:6e:5b:2a:61:cf:10:5d:9f:27:7b:5c:b4:b5:19:
25:52:1f:8e:76:69:0d:e7:13:5a:9b:e2:42:c6:64:
79:6d:79:e5:d6:39:e8:17:6c:8f:ef:6c:4f:66:f8:
b3:f1:48:94:22:a9:23:73:bc:f2:d5:68:0d:67:7b:
61:e6:89:b4:34:01:b0:d0:f0:65:6f:7c:89:33:e9:
7c:8b:df:50:a6:c8:2e:cf:7a:6b:ed:00:19:8d:2a:
22:bf:e9:1b:a7:9d:fc:5d:79:30:e5:b3:4b:3a:6b:
90:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:95:EF:74:F8:3E:9F:CF:DD:06:E3:6B:8C:73:9E:F5:75:97:FC:D2
X509v3 Authority Key Identifier:
keyid:3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/s5XvdPg-n8_dBuNrjHOe9XWX_NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.2.0/23
IPv6:
2a07:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
e7:25:60:10:81:c8:89:74:e8:04:d3:75:60:08:e0:6f:b1:ab:
56:55:d4:aa:3d:f0:a4:fd:2e:2e:93:94:4b:a3:f3:72:ca:af:
55:af:b7:71:16:55:5c:e4:96:87:ba:a5:b5:ec:33:9e:b1:8c:
d6:27:36:41:36:ad:8a:f7:41:27:ae:0b:6b:4b:53:44:6d:5c:
bc:8b:86:45:2f:22:56:61:b4:ba:73:75:c4:0a:5e:23:30:5a:
80:6f:bd:9b:a1:7a:e0:9f:36:7d:ce:4b:b3:78:27:55:73:4d:
22:ec:ab:8f:8a:e4:2e:a7:2f:8a:81:f1:6f:25:6b:06:08:fc:
82:4b:3a:38:f4:98:64:d3:48:cb:e7:31:9d:f3:ac:e4:d1:2a:
cd:d1:52:e8:34:08:b6:54:d6:66:da:cf:ee:36:5f:45:aa:19:
71:a9:43:8f:3f:5d:59:8b:76:c6:d0:5e:02:f4:3a:cb:18:bb:
cf:e1:28:56:6b:00:5b:41:ae:b6:6c:59:b1:88:2f:87:db:81:
c6:6a:bd:ec:b0:10:2e:75:34:77:e7:12:d2:79:b8:25:cc:ef:
68:66:63:8f:3e:07:8b:f3:e4:4d:72:77:05:a3:7e:52:85:42:
2d:71:01:c6:b1:72:9e:6d:7e:a7:af:78:3a:42:6a:f8:f7:93:
83:b9:dd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:27:45 2026 by rpki-client